diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3656e2a1fabf445de950165de0778d1a5a6923ce..91eebe2ee1cfcb3e9f303b9d11558df7e1fba7e7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,22 @@
+# [7.0.0](https://gitlab.com/to-be-continuous/python/compare/6.11.1...7.0.0) (2024-05-17)
+
+
+### Code Refactoring
+
+* **Trivy:** py-trivy job is enabled by default ([d9e8679](https://gitlab.com/to-be-continuous/python/commit/d9e867952d5a2040037c5cb03456380b976219af))
+
+
+### Features
+
+* add support for slim and alpine Python images + change default base image ([22003d1](https://gitlab.com/to-be-continuous/python/commit/22003d195670f3d923f31014636485bc783068bb))
+
+
+### BREAKING CHANGES
+
+* **Trivy:** py-trivy job is enabled by default
+'trivy-enabled' input is no longer supported - use 'trivy-disabled' instead
+* the default base image has been changed to python:debian-slim
+
 ## [6.11.1](https://gitlab.com/to-be-continuous/python/compare/6.11.0...6.11.1) (2024-05-05)
 
 
diff --git a/README.md b/README.md
index aae8fdd3a587c8dc752633e029cdff33d9513609..39e9ecba432cf7f81095b2f544ecd33bed140cd3 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,7 @@ Add the following to your `gitlab-ci.yml`:
 ```yaml
 include:
   # 1: include the component
-  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python@6.11.1
+  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python@7.0.0
     # 2: set/override component inputs
     inputs:
       image: registry.hub.docker.com/library/python:3.12-slim
@@ -29,7 +29,7 @@ Add the following to your `gitlab-ci.yml`:
 include:
   # 1: include the template
   - project: 'to-be-continuous/python'
-    ref: '6.11.1'
+    ref: '7.0.0'
     file: '/templates/gitlab-ci-python.yml'
 
 variables:
@@ -517,9 +517,9 @@ With:
 ```yaml
 include:
   # main component
-  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python@6.11.1
+  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python@7.0.0
   # Vault variant
-  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python-vault@6.11.1
+  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python-vault@7.0.0
     inputs:
       vault-base-url: "https://vault.acme.host/v1"
       # audience claim for JWT
@@ -559,13 +559,13 @@ The variant requires the additional configuration parameters:
 
 ```yaml
 include:
-  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python@6.11.1
+  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python@7.0.0
     # 2: set/override component inputs
     inputs:
       image: registry.hub.docker.com/library/python:3.12-slim
       pytest-enabled: true
 
-  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python-gcp@6.11.1
+  - component: gitlab.com/to-be-continuous/python/gitlab-ci-python-gcp@7.0.0
     inputs:
       # common OIDC config for non-prod envs
       gcp-oidc-provider: "projects/<gcp_nonprod_proj_id>/locations/global/workloadIdentityPools/<pool_id>/providers/<provider_id>"
diff --git a/templates/gitlab-ci-python-gcp.yml b/templates/gitlab-ci-python-gcp.yml
index eb8a53ac98506b5c5f09b0d662985318e24b6555..a94e45efa0edf820e1f8f791ebf4d6c3b270b119 100644
--- a/templates/gitlab-ci-python-gcp.yml
+++ b/templates/gitlab-ci-python-gcp.yml
@@ -44,7 +44,7 @@ variables:
   image: $PYTHON_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "python", "6.11.1"]
+      command: ["--service", "python", "7.0.0"]
   variables:
     GCP_JWT: $GCP_JWT
   before_script:
diff --git a/templates/gitlab-ci-python-vault.yml b/templates/gitlab-ci-python-vault.yml
index 7e541c83ef7c09b5d6d1adf40677c76c9fc97421..10bdaf76608b61ee6dd98d5133ec51fc6cca4541 100644
--- a/templates/gitlab-ci-python-vault.yml
+++ b/templates/gitlab-ci-python-vault.yml
@@ -22,7 +22,7 @@ variables:
 .python-base:
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "python", "6.11.1"]
+      command: ["--service", "python", "7.0.0"]
     - name: "$TBC_VAULT_IMAGE"
       alias: "vault-secrets-provider"
   variables:
diff --git a/templates/gitlab-ci-python.yml b/templates/gitlab-ci-python.yml
index fa13cb922fecffb8d304df7d1cc37c6171414dd2..fb2fbeed38b41a3f7c267bb39536bd3351fcdc3f 100644
--- a/templates/gitlab-ci-python.yml
+++ b/templates/gitlab-ci-python.yml
@@ -880,7 +880,7 @@ stages:
   image: $PYTHON_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "python", "6.11.1"]
+      command: ["--service", "python", "7.0.0"]
   variables:
     # set local cache dir; most Python tools honour XDG specs
     XDG_CACHE_HOME: "$CI_PROJECT_DIR/.cache"